Community discussions

MikroTik App
 
GiovanniG
Member
Member
Topic Author
Posts: 338
Joined: Sun Nov 15, 2015 4:12 pm

How to block the gateway temporary

Sun Apr 24, 2022 11:14 pm

Hi, I want to stop a VLAN communicating with internet only DHCP should work as well as interface, just the gateway to internet.
I've disabled on the bridge the fast forwarding and I've reated a reject rule on the Firewall about input chain for that subnet as source IP. I still ping google and surf internet, how can I solve it? Which is the most common method to stop routing?
By the time I've used the dirty way to assign a fake gateway by DHCP
Thank you
 
Sob
Forum Guru
Forum Guru
Posts: 9119
Joined: Mon Apr 20, 2009 9:11 pm

Re: How to block the gateway temporary

Sun Apr 24, 2022 11:21 pm

You want forward chain, not input.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18958
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: How to block the gateway temporary

Sun Apr 24, 2022 11:29 pm

input chain TO the router (aka router services)
forward chain ACROSS the router ( wan to lan, lan to wan, lan to lan)
 
msatter
Forum Guru
Forum Guru
Posts: 2897
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: How to block the gateway temporary

Sun Apr 24, 2022 11:33 pm

Here you can see why Input won't work. It is skipped because traffic is forwarded, as sob mentioned, this because of the routing decision: https://help.mikrotik.com/docs/display/ ... OS-Forward

Who is online

Users browsing this forum: Bing [Bot], GoogleOther [Bot], ItchyAnkle, Knapek, menyarito and 82 guests